Synapse vulnerable to federation denial of service via malformed events
43Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 7.1epss 1.1%
de la publicación al arma
Publicada en NVD27 mar
VulnCheck26 mar
probabilidad de explotación
1.1%top 36% de las CVE
explotación observada
síVulnCheck
Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Productos afectados
element-hq · synapse